@limrun/ui 0.14.0-rc.2 → 0.14.0-rc.4

package/dist/app-store-relay/index.cjs

@@ -1,9 +1,9 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const l=require("../client-BtC4n_qf.js"),c=require("../index-CMeQfhYy.js"),p=require("../provisioning-Va0PH4Kk.js"),P={name:"RSASSA-PKCS1-v1_5",modulusLength:2048,publicExponent:new Uint8Array([1,0,1]),hash:"SHA-256"};async function I(e){if(!crypto.subtle)throw new Error("WebCrypto is not available in this browser.");const t=await crypto.subtle.generateKey(P,!0,["sign","verify"]),r=new Uint8Array(await crypto.subtle.exportKey("spki",t.publicKey)),n=d(C(0),h(e),r,B(0,new Uint8Array)),i=new Uint8Array(await crypto.subtle.sign("RSASSA-PKCS1-v1_5",t.privateKey,N(n))),o=d(n,d(b("1.2.840.113549.1.1.11"),R()),E(i)),s=new Uint8Array(await crypto.subtle.exportKey("pkcs8",t.privateKey));return{privateKey:t.privateKey,privateKeyPKCS8Base64:y(s),publicKeySPKIBase64:y(r),csrPEM:U("CERTIFICATE REQUEST",o),csrBase64:y(o)}}function S(e){if(!e.certificateBase64&&!e.certificatePEM)throw new Error("certificateBase64 or certificatePEM is required.");const t=c.forge.pki.privateKeyFromPem(k("PRIVATE KEY",e.privateKeyPKCS8Base64)),r=e.certificatePEM?c.forge.pki.certificateFromPem(e.certificatePEM):c.forge.pki.certificateFromAsn1(c.forge.asn1.fromDer(c.forge.util.createBuffer(O(e.certificateBase64)))),n=c.forge.pkcs12.toPkcs12Asn1(t,[r],e.password,{algorithm:"3des",friendlyName:e.friendlyName}),i=c.forge.asn1.toDer(n).getBytes();return F(i)}function h(e){const t=[v("2.5.4.3",T(e.commonName))];return e.emailAddress&&t.push(v("1.2.840.113549.1.9.1",K(e.emailAddress))),d(...t)}function v(e,t){return q(d(b(e),t))}function d(...e){return u(48,A(...e))}function q(...e){return u(49,A(...e))}function B(e,t){return u(160+e,t)}function C(e){return u(2,new Uint8Array([e]))}function R(){return new Uint8Array([5,0])}function T(e){return u(12,new TextEncoder().encode(e))}function K(e){return u(22,new TextEncoder().encode(e))}function E(e){return u(3,A(new Uint8Array([0]),e))}function b(e){const t=e.split(".").map(n=>parseInt(n,10));if(t.length<2||t.some(n=>!Number.isFinite(n)))throw new Error(`Invalid OID: ${e}`);const r=[t[0]*40+t[1]];for(const n of t.slice(2)){const i=[n&127];let o=n>>7;for(;o>0;)i.unshift(o&127|128),o>>=7;r.push(...i)}return u(6,new Uint8Array(r))}function u(e,t){return A(new Uint8Array([e]),x(t.byteLength),t)}function x(e){if(e<128)return new Uint8Array([e]);const t=[];let r=e;for(;r>0;)t.unshift(r&255),r>>=8;return new Uint8Array([128|t.length,...t])}function A(...e){const t=e.reduce((i,o)=>i+o.byteLength,0),r=new Uint8Array(t);let n=0;for(const i of e)r.set(i,n),n+=i.byteLength;return r}function U(e,t){const n=y(t).match(/.{1,64}/g)??[];return`-----BEGIN ${e}-----
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const s=require("../client-D1drDXxE.js"),u=require("../index-ChhtuQ7e.js"),P=require("../gsa-srp-CCIfUz7Y.js"),p=require("../provisioning-BlQMccX_.js"),I={name:"RSASSA-PKCS1-v1_5",modulusLength:2048,publicExponent:new Uint8Array([1,0,1]),hash:"SHA-256"};async function S(e){if(!crypto.subtle)throw new Error("WebCrypto is not available in this browser.");const t=await crypto.subtle.generateKey(I,!0,["sign","verify"]),r=new Uint8Array(await crypto.subtle.exportKey("spki",t.publicKey)),n=d(R(0),h(e),r,C(0,new Uint8Array)),i=new Uint8Array(await crypto.subtle.sign("RSASSA-PKCS1-v1_5",t.privateKey,L(n))),o=d(n,d(b("1.2.840.113549.1.1.11"),T()),x(i)),l=new Uint8Array(await crypto.subtle.exportKey("pkcs8",t.privateKey));return{privateKey:t.privateKey,privateKeyPKCS8Base64:y(l),publicKeySPKIBase64:y(r),csrPEM:k("CERTIFICATE REQUEST",o),csrBase64:y(o)}}function q(e){if(!e.certificateBase64&&!e.certificatePEM)throw new Error("certificateBase64 or certificatePEM is required.");const t=u.forge.pki.privateKeyFromPem(F("PRIVATE KEY",e.privateKeyPKCS8Base64)),r=e.certificatePEM?u.forge.pki.certificateFromPem(e.certificatePEM):u.forge.pki.certificateFromAsn1(u.forge.asn1.fromDer(u.forge.util.createBuffer(N(e.certificateBase64)))),n=u.forge.pkcs12.toPkcs12Asn1(t,[r],e.password,{algorithm:"3des",friendlyName:e.friendlyName}),i=u.forge.asn1.toDer(n).getBytes();return O(i)}function h(e){const t=[v("2.5.4.3",K(e.commonName))];return e.emailAddress&&t.push(v("1.2.840.113549.1.9.1",E(e.emailAddress))),d(...t)}function v(e,t){return B(d(b(e),t))}function d(...e){return c(48,A(...e))}function B(...e){return c(49,A(...e))}function C(e,t){return c(160+e,t)}function R(e){return c(2,new Uint8Array([e]))}function T(){return new Uint8Array([5,0])}function K(e){return c(12,new TextEncoder().encode(e))}function E(e){return c(22,new TextEncoder().encode(e))}function x(e){return c(3,A(new Uint8Array([0]),e))}function b(e){const t=e.split(".").map(n=>parseInt(n,10));if(t.length<2||t.some(n=>!Number.isFinite(n)))throw new Error(`Invalid OID: ${e}`);const r=[t[0]*40+t[1]];for(const n of t.slice(2)){const i=[n&127];let o=n>>7;for(;o>0;)i.unshift(o&127|128),o>>=7;r.push(...i)}return c(6,new Uint8Array(r))}function c(e,t){return A(new Uint8Array([e]),U(t.byteLength),t)}function U(e){if(e<128)return new Uint8Array([e]);const t=[];let r=e;for(;r>0;)t.unshift(r&255),r>>=8;return new Uint8Array([128|t.length,...t])}function A(...e){const t=e.reduce((i,o)=>i+o.byteLength,0),r=new Uint8Array(t);let n=0;for(const i of e)r.set(i,n),n+=i.byteLength;return r}function k(e,t){const n=y(t).match(/.{1,64}/g)??[];return`-----BEGIN ${e}-----
 ${n.join(`
 `)}
 -----END ${e}-----
-`}function k(e,t){const r=t.match(/.{1,64}/g)??[];return`-----BEGIN ${e}-----
+`}function F(e,t){const r=t.match(/.{1,64}/g)??[];return`-----BEGIN ${e}-----
 ${r.join(`
 `)}
 -----END ${e}-----
-`}function y(e){let t="";for(const r of e)t+=String.fromCharCode(r);return btoa(t)}function F(e){return btoa(e)}function O(e){return atob(e)}function N(e){const t=new Uint8Array(e.byteLength);return t.set(e),t.buffer}async function a({relay:e,request:t,label:r="Apple Developer Portal request",validatePortalResponse:n=!0,mapBody:i}){const o=await l.proxyProvisioningRequest(e,t);return n&&g(o.body,r),i?i(o.body,o):o}async function L(e){return a({...e,request:p.listTeamsRequest(),label:"Apple Developer team list",mapBody:t=>re([...t?.teams??[],...t?.availableProviders??[],...t?.provider?[t.provider]:[]])})}async function $({certificateKind:e="development",teamId:t="",...r}){return a({...r,request:e==="distribution"?p.findDistributionCertificatesRequest(t):p.findDevelopmentCertificatesRequest(t),label:"Apple Developer certificate list",mapBody:n=>n?.certRequests??[]})}async function W({certificateKind:e="development",teamId:t="",csrPEM:r,...n}){return a({...n,request:e==="distribution"?p.submitDistributionCSRRequest({csrPEM:r,teamID:t}):p.submitDevelopmentCSRRequest({csrPEM:r,teamID:t}),label:e==="distribution"?"Apple Distribution certificate creation":"Apple Development certificate creation",mapBody:i=>i?.certRequest})}async function G({certificateKind:e="development",certificateId:t,teamId:r="",...n}){return a({...n,request:e==="distribution"?p.downloadDistributionCertificateRequest(t,r):p.downloadCertificateRequest(t,r),label:"Apple certificate download",validatePortalResponse:!1,mapBody:(i,o)=>o})}async function H({certificateKind:e="development",certificateId:t,teamId:r="",...n}){return a({...n,request:{method:"POST",path:"/account/ios/certificate/revokeCertificate.action",payload:{teamId:r,certificateId:t,type:e==="distribution"?"WXV89964HE":"83Q87W3TGH"}},label:"Apple certificate deletion",mapBody:i=>i})}async function M({teamId:e="",search:t="",...r}){const n=t.trim().toLowerCase();return a({...r,request:p.findBundleIDRequest({bundleID:t,teamID:e}),label:"Apple bundle ID list",mapBody:i=>{const o=i?.appIds??[];return n?o.filter(s=>[s.identifier,s.bundleId,s.name].some(f=>typeof f=="string"&&f.toLowerCase().includes(n))):o}})}async function _({teamId:e="",bundleId:t,name:r,...n}){return a({...n,request:p.createBundleIDRequest({bundleID:t,teamID:e,name:r}),label:"Apple bundle ID creation",mapBody:i=>i?.appId})}async function j({teamId:e="",appIdId:t,bundleId:r,name:n,...i}){return a({...i,request:{method:"POST",path:"/account/ios/identifiers/updateAppId.action",payload:{teamId:e,appIdId:t,...r?{identifier:r}:{},...n?{name:n}:{}}},label:"Apple bundle ID update",mapBody:o=>o?.appId})}async function V({teamId:e="",appIdId:t,...r}){return a({...r,request:{method:"POST",path:"/account/ios/identifiers/deleteAppId.action",payload:{teamId:e,appIdId:t}},label:"Apple bundle ID deletion",mapBody:n=>n})}async function Q({teamId:e="",deviceUDID:t="",...r}){const n=D(t);return a({...r,request:p.findDeviceRequest({deviceUDID:t,teamID:e}),label:"Apple device list",mapBody:i=>{const o=i?.devices??[];return n?o.filter(s=>D(s.deviceNumber)===n):o}})}function D(e){return(e??"").replace(/-/g,"").replace(/[^a-fA-F0-9]/g,"").toUpperCase()}async function z({teamId:e="",deviceUDID:t,name:r,...n}){return a({...n,request:p.registerDeviceRequest({deviceUDID:t,teamID:e,name:r}),label:"Apple device registration",mapBody:i=>i?.device})}async function J({teamId:e="",deviceId:t,name:r,...n}){return a({...n,request:{method:"POST",path:"/account/ios/device/updateDevice.action",payload:{teamId:e,deviceId:t,...r?{name:r}:{}}},label:"Apple device update",mapBody:i=>i?.device})}async function X({teamId:e="",deviceId:t,...r}){return a({...r,request:{method:"POST",path:"/account/ios/device/deleteDevice.action",payload:{teamId:e,deviceId:t}},label:"Apple device deletion",mapBody:n=>n})}async function Y({profileKind:e="development",teamId:t="",bundleId:r="",...n}){return a({...n,request:e==="adhoc"?p.findAdHocProfilesRequest({bundleID:r,teamID:t}):p.findDevelopmentProfilesRequest({bundleID:r,teamID:t}),label:"Apple provisioning profile list",mapBody:i=>i?.provisioningProfiles??[]})}async function Z({profileKind:e="development",teamId:t="",bundleId:r,appIdId:n,certificateIds:i,deviceIds:o,name:s,...f}){const[m]=i;if(!m)throw new Error("At least one certificate ID is required to create an Apple provisioning profile.");return a({...f,request:e==="adhoc"?p.createAdHocProfileRequest({bundleID:r,teamID:t,appIDID:n,certificateID:m,deviceIDs:o,name:s}):p.createDevelopmentProfileRequest({bundleID:r,teamID:t,appIDID:n,certificateID:m,deviceIDs:o,name:s}),label:"Apple provisioning profile creation",mapBody:w=>w?.provisioningProfile})}async function ee({teamId:e="",profileId:t,...r}){return a({...r,request:p.downloadProfileRequest(t,e),label:"Apple provisioning profile download",validatePortalResponse:!1,mapBody:(n,i)=>i})}async function te({teamId:e="",profileId:t,...r}){return a({...r,request:{method:"POST",path:"/account/ios/profile/deleteProvisioningProfile.action",payload:{teamId:e,provisioningProfileId:t}},label:"Apple provisioning profile deletion",mapBody:n=>n})}function g(e,t){if(!e)throw new Error(`${t} returned an empty response.`);if(e.resultCode!==void 0&&e.resultCode!==0)throw new Error(`${t} failed: ${e.userString??e.resultString??e.resultCode}`)}function re(e){const t=new Set,r=[];for(const n of e){const i=String(n.teamId??n.providerId??n.publicProviderId??n.name??JSON.stringify(n));t.has(i)||(t.add(i),r.push(n))}return r}exports.AppleRelayWebSocketClient=l.AppleRelayWebSocketClient;exports.fetchAppleAccountSession=l.fetchAppleAccountSession;exports.openAppleRelayWebSocket=l.openAppleRelayWebSocket;exports.proxyPhoneTwoFactorCode=l.proxyPhoneTwoFactorCode;exports.proxySrpComplete=l.proxySrpComplete;exports.proxySrpInit=l.proxySrpInit;exports.proxyTwoFactorCode=l.proxyTwoFactorCode;exports.startBrowserOwnedAppleIDLogin=l.startBrowserOwnedAppleIDLogin;exports.triggerPhoneTwoFactor=l.triggerPhoneTwoFactor;exports.triggerTrustedDeviceTwoFactor=l.triggerTrustedDeviceTwoFactor;exports.AppleGsaSrpClient=c.AppleGsaSrpClient;exports.assertAppleDeveloperPortalResponseOK=g;exports.createAppleBundleID=_;exports.createAppleCertificate=W;exports.createAppleProfile=Z;exports.deleteAppleBundleID=V;exports.deleteAppleCertificate=H;exports.deleteAppleDevice=X;exports.deleteAppleProfile=te;exports.downloadAppleCertificate=G;exports.downloadAppleProfile=ee;exports.exportAppleCertificateP12=S;exports.generateAppleSigningKeyAndCSR=I;exports.listAppleBundleIDs=M;exports.listAppleCertificates=$;exports.listAppleDevices=Q;exports.listAppleProfiles=Y;exports.listAppleTeams=L;exports.registerAppleDevice=z;exports.requestAppleProvisioning=a;exports.updateAppleBundleID=j;exports.updateAppleDevice=J;
+`}function y(e){let t="";for(const r of e)t+=String.fromCharCode(r);return btoa(t)}function O(e){return btoa(e)}function N(e){return atob(e)}function L(e){const t=new Uint8Array(e.byteLength);return t.set(e),t.buffer}async function a({relay:e,request:t,label:r="Apple Developer Portal request",validatePortalResponse:n=!0,mapBody:i}){const o=await s.proxyProvisioningRequest(e,t);return n&&g(o.body,r),i?i(o.body,o):o}async function $(e){return a({...e,request:p.listTeamsRequest(),label:"Apple Developer team list",mapBody:t=>ne([...t?.teams??[],...t?.availableProviders??[],...t?.provider?[t.provider]:[]])})}async function W({certificateKind:e="development",teamId:t="",...r}){return a({...r,request:e==="distribution"?p.findDistributionCertificatesRequest(t):p.findDevelopmentCertificatesRequest(t),label:"Apple Developer certificate list",mapBody:n=>n?.certRequests??[]})}async function G({certificateKind:e="development",teamId:t="",csrPEM:r,...n}){return a({...n,request:e==="distribution"?p.submitDistributionCSRRequest({csrPEM:r,teamID:t}):p.submitDevelopmentCSRRequest({csrPEM:r,teamID:t}),label:e==="distribution"?"Apple Distribution certificate creation":"Apple Development certificate creation",mapBody:i=>i?.certRequest})}async function H({certificateKind:e="development",certificateId:t,teamId:r="",...n}){return a({...n,request:e==="distribution"?p.downloadDistributionCertificateRequest(t,r):p.downloadCertificateRequest(t,r),label:"Apple certificate download",validatePortalResponse:!1,mapBody:(i,o)=>o})}async function M({certificateKind:e="development",certificateId:t,teamId:r="",...n}){return a({...n,request:{method:"POST",path:"/account/ios/certificate/revokeCertificate.action",payload:{teamId:r,certificateId:t,type:e==="distribution"?"WXV89964HE":"83Q87W3TGH"}},label:"Apple certificate deletion",mapBody:i=>i})}async function _({teamId:e="",search:t="",...r}){const n=t.trim().toLowerCase();return a({...r,request:p.findBundleIDRequest({bundleID:t,teamID:e}),label:"Apple bundle ID list",mapBody:i=>{const o=i?.appIds??[];return n?o.filter(l=>[l.identifier,l.bundleId,l.name].some(f=>typeof f=="string"&&f.toLowerCase().includes(n))):o}})}async function j({teamId:e="",bundleId:t,name:r,...n}){return a({...n,request:p.createBundleIDRequest({bundleID:t,teamID:e,name:r}),label:"Apple bundle ID creation",mapBody:i=>i?.appId})}async function V({teamId:e="",appIdId:t,bundleId:r,name:n,...i}){return a({...i,request:{method:"POST",path:"/account/ios/identifiers/updateAppId.action",payload:{teamId:e,appIdId:t,...r?{identifier:r}:{},...n?{name:n}:{}}},label:"Apple bundle ID update",mapBody:o=>o?.appId})}async function Q({teamId:e="",appIdId:t,...r}){return a({...r,request:{method:"POST",path:"/account/ios/identifiers/deleteAppId.action",payload:{teamId:e,appIdId:t}},label:"Apple bundle ID deletion",mapBody:n=>n})}async function z({teamId:e="",deviceUDID:t="",...r}){const n=D(t);return a({...r,request:p.findDeviceRequest({deviceUDID:t,teamID:e}),label:"Apple device list",mapBody:i=>{const o=i?.devices??[];return n?o.filter(l=>D(l.deviceNumber)===n):o}})}function D(e){return(e??"").replace(/-/g,"").replace(/[^a-fA-F0-9]/g,"").toUpperCase()}async function J({teamId:e="",deviceUDID:t,name:r,...n}){return a({...n,request:p.registerDeviceRequest({deviceUDID:t,teamID:e,name:r}),label:"Apple device registration",mapBody:i=>i?.device})}async function X({teamId:e="",deviceId:t,name:r,...n}){return a({...n,request:{method:"POST",path:"/account/ios/device/updateDevice.action",payload:{teamId:e,deviceId:t,...r?{name:r}:{}}},label:"Apple device update",mapBody:i=>i?.device})}async function Y({teamId:e="",deviceId:t,...r}){return a({...r,request:{method:"POST",path:"/account/ios/device/deleteDevice.action",payload:{teamId:e,deviceId:t}},label:"Apple device deletion",mapBody:n=>n})}async function Z({profileKind:e="development",teamId:t="",bundleId:r="",...n}){return a({...n,request:e==="adhoc"?p.findAdHocProfilesRequest({bundleID:r,teamID:t}):p.findDevelopmentProfilesRequest({bundleID:r,teamID:t}),label:"Apple provisioning profile list",mapBody:i=>i?.provisioningProfiles??[]})}async function ee({profileKind:e="development",teamId:t="",bundleId:r,appIdId:n,certificateIds:i,deviceIds:o,name:l,...f}){const[m]=i;if(!m)throw new Error("At least one certificate ID is required to create an Apple provisioning profile.");return a({...f,request:e==="adhoc"?p.createAdHocProfileRequest({bundleID:r,teamID:t,appIDID:n,certificateID:m,deviceIDs:o,name:l}):p.createDevelopmentProfileRequest({bundleID:r,teamID:t,appIDID:n,certificateID:m,deviceIDs:o,name:l}),label:"Apple provisioning profile creation",mapBody:w=>w?.provisioningProfile})}async function te({teamId:e="",profileId:t,...r}){return a({...r,request:p.downloadProfileRequest(t,e),label:"Apple provisioning profile download",validatePortalResponse:!1,mapBody:(n,i)=>i})}async function re({teamId:e="",profileId:t,...r}){return a({...r,request:{method:"POST",path:"/account/ios/profile/deleteProvisioningProfile.action",payload:{teamId:e,provisioningProfileId:t}},label:"Apple provisioning profile deletion",mapBody:n=>n})}function g(e,t){if(!e)throw new Error(`${t} returned an empty response.`);if(e.resultCode!==void 0&&e.resultCode!==0)throw new Error(`${t} failed: ${e.userString??e.resultString??e.resultCode}`)}function ne(e){const t=new Set,r=[];for(const n of e){const i=String(n.teamId??n.providerId??n.publicProviderId??n.name??JSON.stringify(n));t.has(i)||(t.add(i),r.push(n))}return r}exports.AppleRelayWebSocketClient=s.AppleRelayWebSocketClient;exports.fetchAppleAccountSession=s.fetchAppleAccountSession;exports.openAppleRelayWebSocket=s.openAppleRelayWebSocket;exports.proxyPhoneTwoFactorCode=s.proxyPhoneTwoFactorCode;exports.proxySrpComplete=s.proxySrpComplete;exports.proxySrpInit=s.proxySrpInit;exports.proxyTwoFactorCode=s.proxyTwoFactorCode;exports.startBrowserOwnedAppleIDLogin=s.startBrowserOwnedAppleIDLogin;exports.triggerPhoneTwoFactor=s.triggerPhoneTwoFactor;exports.triggerTrustedDeviceTwoFactor=s.triggerTrustedDeviceTwoFactor;exports.AppleGsaSrpClient=P.AppleGsaSrpClient;exports.assertAppleDeveloperPortalResponseOK=g;exports.createAppleBundleID=j;exports.createAppleCertificate=G;exports.createAppleProfile=ee;exports.deleteAppleBundleID=Q;exports.deleteAppleCertificate=M;exports.deleteAppleDevice=Y;exports.deleteAppleProfile=re;exports.downloadAppleCertificate=H;exports.downloadAppleProfile=te;exports.exportAppleCertificateP12=q;exports.generateAppleSigningKeyAndCSR=S;exports.listAppleBundleIDs=_;exports.listAppleCertificates=W;exports.listAppleDevices=z;exports.listAppleProfiles=Z;exports.listAppleTeams=$;exports.registerAppleDevice=J;exports.requestAppleProvisioning=a;exports.updateAppleBundleID=V;exports.updateAppleDevice=X;

package/dist/app-store-relay/index.js

@@ -1,8 +1,8 @@
-import { p as D } from "../client-CBX-hLnL.mjs";
-import { A as Pe, f as he, o as qe, a as Be, b as Se, c as Ce, d as Re, s as Te, t as Ee, e as Ke } from "../client-CBX-hLnL.mjs";
-import { f as p } from "../index-DFdCvi2_.mjs";
-import { A as ke } from "../index-DFdCvi2_.mjs";
-import { l as w, f as g, a as I, s as P, b as h, d as q, c as B, e as S, g as C, h as R, r as T, i as E, j as K, k as U, m as k, n as x } from "../provisioning-DKbkBO-p.mjs";
+import { p as D } from "../client-DSuNtWDv.mjs";
+import { A as Pe, f as he, o as qe, a as Be, b as Se, c as Ce, d as Re, s as Te, t as Ee, e as Ke } from "../client-DSuNtWDv.mjs";
+import { f as p } from "../index-YDu8K9a4.mjs";
+import { A as ke } from "../gsa-srp-Bme3JLEi.mjs";
+import { l as w, f as g, a as I, s as P, b as h, d as q, c as B, e as S, h as C, i as R, r as T, j as E, k as K, m as U, n as k, o as x } from "../provisioning-B_DefBEp.mjs";
 const F = {
   name: "RSASSA-PKCS1-v1_5",
   modulusLength: 2048,

package/dist/app-store-relay/react.cjs

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const t=require("react"),y=require("../client-BtC4n_qf.js");require("../index-CMeQfhYy.js");function F({registryApiUrl:s,token:u,organizationId:l}){const[g,r]=t.useState("idle"),[w,i]=t.useState(),[h,d]=t.useState(),[v,p]=t.useState(),[S,c]=t.useState(),o=t.useRef(void 0),b=t.useCallback(async()=>{await o.current?.close().catch(()=>{}),o.current=void 0,i(void 0),d(void 0),p(void 0),c(void 0),r("idle")},[]);t.useEffect(()=>()=>{o.current?.close(),o.current=void 0},[]);const C=t.useCallback(async({accountName:n,password:a})=>{r("authenticating"),c(void 0),await o.current?.close().catch(()=>{});try{const e=await y.startBrowserOwnedAppleIDLogin({registryApiUrl:s,token:u,organizationId:l,accountName:n,password:a});return o.current=e,i(e),d(e.completeResponse),p(e.twoFactorChallengeResponse),r(e.requiresTwoFactor?"two-factor-required":"authenticated"),e}catch(e){i(void 0),o.current=void 0,c(f(e)),r("error");return}},[s,l,u]),R=t.useCallback(async n=>{const a=o.current;if(!a)throw new Error("Start Apple ID login before submitting a two-factor code.");r("authenticating"),c(void 0);try{const e=await a.finishTwoFactor(n);return r("authenticated"),e}catch(e){c(f(e)),r("error");return}},[]),m=t.useCallback(async()=>{const n=o.current;if(!n)throw new Error("Start Apple ID login before finalizing the Apple session.");return n.finalize()},[]);return{status:g,session:w,completeResponse:h,twoFactorChallengeResponse:v,error:S,startLogin:C,submitTwoFactorCode:R,finalize:m,close:b}}function f(s){return s instanceof Error?s.message:String(s)}exports.useAppleIDLogin=F;
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const t=require("react"),y=require("../client-D1drDXxE.js");require("../index-ChhtuQ7e.js");require("../gsa-srp-CCIfUz7Y.js");const w=require("../errors-BSkqS7U-.js");function m({registryApiUrl:i,token:u,organizationId:l}){const[g,o]=t.useState("idle"),[h,a]=t.useState(),[v,d]=t.useState(),[f,p]=t.useState(),[S,n]=t.useState(),r=t.useRef(void 0),b=t.useCallback(async()=>{await r.current?.close().catch(()=>{}),r.current=void 0,a(void 0),d(void 0),p(void 0),n(void 0),o("idle")},[]);t.useEffect(()=>()=>{r.current?.close(),r.current=void 0},[]);const C=t.useCallback(async({accountName:s,password:c})=>{o("authenticating"),n(void 0),await r.current?.close().catch(()=>{});try{const e=await y.startBrowserOwnedAppleIDLogin({registryApiUrl:i,token:u,organizationId:l,accountName:s,password:c});return r.current=e,a(e),d(e.completeResponse),p(e.twoFactorChallengeResponse),o(e.requiresTwoFactor?"two-factor-required":"authenticated"),e}catch(e){a(void 0),r.current=void 0,n(w.errorMessage(e)),o("error");return}},[i,l,u]),R=t.useCallback(async s=>{const c=r.current;if(!c)throw new Error("Start Apple ID login before submitting a two-factor code.");o("authenticating"),n(void 0);try{const e=await c.finishTwoFactor(s);return o("authenticated"),e}catch(e){n(w.errorMessage(e)),o("error");return}},[]),q=t.useCallback(async()=>{const s=r.current;if(!s)throw new Error("Start Apple ID login before finalizing the Apple session.");return s.finalize()},[]);return{status:g,session:h,completeResponse:v,twoFactorChallengeResponse:f,error:S,startLogin:C,submitTwoFactorCode:R,finalize:q,close:b}}exports.useAppleIDLogin=m;

package/dist/app-store-relay/react.d.ts

@@ -12,4 +12,4 @@ export type UseAppleIDLoginResult = {
     finalize: () => Promise<AppleRelayResponse | undefined>;
     close: () => Promise<void>;
 };
-export declare function useAppleIDLogin({ registryApiUrl, token, organizationId }: UseAppleIDLoginOptions): UseAppleIDLoginResult;
+export declare function useAppleIDLogin({ registryApiUrl, token, organizationId, }: UseAppleIDLoginOptions): UseAppleIDLoginResult;

package/dist/app-store-relay/react.js

@@ -1,50 +1,56 @@
-import { useState as c, useRef as y, useCallback as a, useEffect as E } from "react";
-import { s as A } from "../client-CBX-hLnL.mjs";
-import "../index-DFdCvi2_.mjs";
-function L({ registryApiUrl: r, token: l, organizationId: d }) {
-  const [h, o] = c("idle"), [v, u] = c(), [g, p] = c(), [m, f] = c(), [R, s] = c(), t = y(void 0), C = a(async () => {
+import { useState as n, useRef as S, useCallback as i, useEffect as A } from "react";
+import { s as D } from "../client-DSuNtWDv.mjs";
+import "../index-YDu8K9a4.mjs";
+import "../gsa-srp-Bme3JLEi.mjs";
+import { e as w } from "../errors-gy8yQJos.mjs";
+function x({
+  registryApiUrl: u,
+  token: l,
+  organizationId: p
+}) {
+  const [h, o] = n("idle"), [v, a] = n(), [g, d] = n(), [m, f] = n(), [R, s] = n(), t = S(void 0), C = i(async () => {
     await t.current?.close().catch(() => {
-    }), t.current = void 0, u(void 0), p(void 0), f(void 0), s(void 0), o("idle");
+    }), t.current = void 0, a(void 0), d(void 0), f(void 0), s(void 0), o("idle");
   }, []);
-  E(() => () => {
+  A(() => () => {
     t.current?.close(), t.current = void 0;
   }, []);
-  const F = a(
-    async ({ accountName: n, password: i }) => {
+  const F = i(
+    async ({ accountName: r, password: c }) => {
       o("authenticating"), s(void 0), await t.current?.close().catch(() => {
       });
       try {
-        const e = await A({
-          registryApiUrl: r,
+        const e = await D({
+          registryApiUrl: u,
           token: l,
-          organizationId: d,
-          accountName: n,
-          password: i
+          organizationId: p,
+          accountName: r,
+          password: c
         });
-        return t.current = e, u(e), p(e.completeResponse), f(e.twoFactorChallengeResponse), o(e.requiresTwoFactor ? "two-factor-required" : "authenticated"), e;
+        return t.current = e, a(e), d(e.completeResponse), f(e.twoFactorChallengeResponse), o(e.requiresTwoFactor ? "two-factor-required" : "authenticated"), e;
       } catch (e) {
-        u(void 0), t.current = void 0, s(w(e)), o("error");
+        a(void 0), t.current = void 0, s(w(e)), o("error");
         return;
       }
     },
-    [r, d, l]
-  ), S = a(async (n) => {
-    const i = t.current;
-    if (!i)
+    [u, p, l]
+  ), b = i(async (r) => {
+    const c = t.current;
+    if (!c)
       throw new Error("Start Apple ID login before submitting a two-factor code.");
     o("authenticating"), s(void 0);
     try {
-      const e = await i.finishTwoFactor(n);
+      const e = await c.finishTwoFactor(r);
       return o("authenticated"), e;
     } catch (e) {
       s(w(e)), o("error");
       return;
     }
-  }, []), b = a(async () => {
-    const n = t.current;
-    if (!n)
+  }, []), y = i(async () => {
+    const r = t.current;
+    if (!r)
       throw new Error("Start Apple ID login before finalizing the Apple session.");
-    return n.finalize();
+    return r.finalize();
   }, []);
   return {
     status: h,
@@ -53,14 +59,11 @@ function L({ registryApiUrl: r, token: l, organizationId: d }) {
     twoFactorChallengeResponse: m,
     error: R,
     startLogin: F,
-    submitTwoFactorCode: S,
-    finalize: b,
+    submitTwoFactorCode: b,
+    finalize: y,
     close: C
   };
 }
-function w(r) {
-  return r instanceof Error ? r.message : String(r);
-}
 export {
-  L as useAppleIDLogin
+  x as useAppleIDLogin
 };

package/dist/apple-credentials/index.cjs

@@ -0,0 +1 @@
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const S=require("../app-store-relay/index.cjs"),E=require("../browser-storage-DLxIqZk5.js"),A="appleCertificate",P="appleProvisioningProfile";function b(r){const e={};for(const[o,i]of Object.entries(r))i&&(e[o]=i);return e}async function T(r,e,o){return r.put(A,e,b(o))}async function I(r,e,o){return r.put(P,e,b(o))}function R(r){const e=r.fetch??fetch.bind(globalThis),o=r.apiUrl.replace(/\/+$/,""),i=(t,s)=>`${o}/v1/organizations/${encodeURIComponent(r.organizationId)}/secrets/${encodeURIComponent(t)}/${encodeURIComponent(s)}`,c={Authorization:`Bearer ${r.token}`,"Content-Type":"application/json"};async function a(t,s){let n=`${t.status}`;try{const d=await t.json();d.message&&(n=d.message)}catch{}throw new Error(`Failed to ${s} secret: ${n}`)}return{async put(t,s,n){const d=await e(i(t,s),{method:"PUT",headers:c,body:JSON.stringify({data:n,replace:!0})});d.ok||await a(d,"store");const f=await d.json();return{type:f.type,name:f.name,createdAt:f.createdAt,data:f.data}},async get(t,s){const n=await e(i(t,s),{method:"GET",headers:c});if(n.status===404)return;n.ok||await a(n,"fetch");const d=await n.json();return{type:d.type,name:d.name,createdAt:d.createdAt,data:d.data}},async list(){const t=await e(`${o}/v1/organizations/${encodeURIComponent(r.organizationId)}/secrets`,{method:"GET",headers:c});return t.ok||await a(t,"list"),(await t.json()).filter(n=>n.type===A||n.type===P).map(n=>({type:n.type,name:n.name,createdAt:n.createdAt}))},async delete(t,s){const n=await e(i(t,s),{method:"DELETE",headers:c});n.status!==404&&(n.ok||await a(n,"delete"))}}}const B="limrun-signing-secrets",$=1,p="secrets";function _(){const r=(i,c)=>`${i}:${c}`;function e(){return new Promise((i,c)=>{const a=indexedDB.open(B,$);a.onupgradeneeded=()=>{const t=a.result;t.objectStoreNames.contains(p)||t.createObjectStore(p,{keyPath:"id"})},a.onsuccess=()=>i(a.result),a.onerror=()=>c(a.error??new Error("Open IndexedDB failed"))})}function o(i){return new Promise((c,a)=>{i.onsuccess=()=>c(i.result),i.onerror=()=>a(i.error??new Error("IndexedDB request failed"))})}return{async put(i,c,a){const t=await e(),s=await o(t.transaction(p,"readonly").objectStore(p).get(r(i,c))),n={id:r(i,c),type:i,name:c,data:a,createdAt:s?.createdAt??new Date().toISOString()};return await o(t.transaction(p,"readwrite").objectStore(p).put(n)),{type:i,name:c,createdAt:n.createdAt,data:a}},async get(i,c){const a=await e(),t=await o(a.transaction(p,"readonly").objectStore(p).get(r(i,c)));if(t)return{type:t.type,name:t.name,createdAt:t.createdAt,data:t.data}},async list(){const i=await e();return(await o(i.transaction(p,"readonly").objectStore(p).getAll())).map(a=>({type:a.type,name:a.name,createdAt:a.createdAt}))},async delete(i,c){const a=await e();await o(a.transaction(p,"readwrite").objectStore(p).delete(r(i,c)))}}}function h(r,e){return`${r}/${e}`}async function N({relay:r,teamId:e,secretStore:o,commonName:i,log:c=()=>{}}){const a="DEVELOPMENT",t=h(e,a),s=await S.listAppleCertificates({relay:r,teamId:e,certificateKind:"development"}),n=u=>u===void 0?void 0:s.find(m=>l(m,"certificateId")===u||l(m,"certRequestId")===u),d=await o.get(A,t),f=l(d?.data,"certificateID");if(d&&f&&d.data.certificateP12Base64){const u=n(f);if(u){const m=l(u,"certificateId")??f;return c("Reusing stored Apple certificate",m),{secret:d,certificateId:m,created:!1}}c("Stored certificate is no longer on the team","Minting a new one.")}const g=await S.generateAppleSigningKeyAndCSR({commonName:i??`Limrun ${e}`}),y=await S.createAppleCertificate({relay:r,teamId:e,certificateKind:"development",csrPEM:g.csrPEM}),w=l(y,"certificateId")??l(y,"certRequestId");if(!w)throw new Error("Apple certificate creation did not return a certificate ID.");const v=await S.downloadAppleCertificate({relay:r,teamId:e,certificateKind:"development",certificateId:w});if(!v.rawBodyBase64)throw new Error("Apple certificate download returned no bytes.");const D={certificateP12Base64:S.exportAppleCertificateP12({privateKeyPKCS8Base64:g.privateKeyPKCS8Base64,certificateBase64:v.rawBodyBase64,password:"",friendlyName:`Apple Development ${e}`}),certificateType:a,teamID:e,certificateID:w,serialNumber:E.normalizeCertificateSerial(l(y,"serialNum")),expirationDate:l(y,"expirationDateString")};let C;try{C=await T(o,t,D)}catch(u){throw new Error(`Certificate ${w} was created on the Apple Developer portal but saving its private key to the secret store failed: ${O(u)}. The key cannot be recovered; revoke certificate ${w} at developer.apple.com before retrying, or the retry will mint another certificate against Apple's limit.`)}return c("Apple certificate stored",w),{secret:C,certificateId:w,created:!0}}function O(r){return r instanceof Error?r.message:String(r)}async function j({relay:r,teamId:e,profileId:o,secretStore:i,log:c=()=>{}}){const t=(await S.downloadAppleProfile({relay:r,teamId:e,profileId:o})).rawBodyBase64;if(!t)throw new Error("Apple provisioning profile download returned no bytes.");const s=E.parseProvisioningProfileBase64(t),n=`${e}/${s.uuid??o}`,d=await I(i,n,{provisioningProfileBase64:t,certificateSerialNumbers:s.certificateSerialNumbers.join(","),bundleIDs:s.bundleID,deviceIDs:s.provisionedDevices.join(","),teamID:s.teamID??e,profileName:s.name,uuid:s.uuid,expirationDate:s.expirationDate});return c("Apple provisioning profile stored",n),d}async function k({relay:r,teamId:e}){return S.listAppleProfiles({relay:r,teamId:e,profileKind:"development"})}function l(r,e){const o=r?.[e];if(typeof o=="string")return o;if(typeof o=="number"||typeof o=="boolean")return String(o)}exports.normalizeCertificateSerial=E.normalizeCertificateSerial;exports.APPLE_CERTIFICATE_SECRET_TYPE=A;exports.APPLE_PROVISIONING_PROFILE_SECRET_TYPE=P;exports.appleCertificateSecretName=h;exports.createBrowserSecretStore=_;exports.createLimrunSecretStore=R;exports.ensureAppleCertificateSecret=N;exports.listTeamAppleProfiles=k;exports.putAppleCertificateSecret=T;exports.putAppleProvisioningProfileSecret=I;exports.saveAppleProfileSecret=j;exports.stringField=l;

package/dist/apple-credentials/index.d.ts

@@ -0,0 +1,59 @@
+import { AppleRelayWebSocketClient } from '../core/device-install/apple';
+import { AppleCertificateType, SigningSecret, SigningSecretStore } from '../core/device-install/storage/secret-store';
+export { APPLE_CERTIFICATE_SECRET_TYPE, APPLE_PROVISIONING_PROFILE_SECRET_TYPE, createBrowserSecretStore, createLimrunSecretStore, putAppleCertificateSecret, putAppleProvisioningProfileSecret, type AppleCertificateSecretData, type AppleCertificateType, type AppleProvisioningProfileSecretData, type LimrunSecretStoreOptions, type SigningSecret, type SigningSecretData, type SigningSecretMetadata, type SigningSecretStore, type SigningSecretType, } from '../core/device-install/storage/secret-store';
+export { normalizeCertificateSerial } from '../core/device-install/storage/browser-storage';
+/**
+ * Conventional secret name of a team's certificate bundle. One bundle per
+ * team and Apple certificate type; the type is in the name so development
+ * and distribution material never collide.
+ */
+export declare function appleCertificateSecretName(teamId: string, certificateType: AppleCertificateType): string;
+export type EnsureAppleCertificateInput = {
+    relay: AppleRelayWebSocketClient;
+    teamId: string;
+    secretStore: SigningSecretStore;
+    /** Common name used when minting a new certificate. */
+    commonName?: string;
+    log?: (message: string, detail?: string) => void;
+};
+export type EnsureAppleCertificateResult = {
+    secret: SigningSecret;
+    certificateId: string;
+    /** True when a new certificate was minted instead of reusing the stored one. */
+    created: boolean;
+};
+/**
+ * Returns a usable development certificate secret for the team, reusing the
+ * stored one when its certificate is still on the team and minting a new
+ * one otherwise. Apple caps development certificates at 2 and never returns
+ * private keys, so reuse of the stored p12 is strongly preferred.
+ *
+ * Durability of the stored material is the secret store's concern:
+ * implementors who want retries or fallbacks build them into their
+ * SigningSecretStore.
+ */
+export declare function ensureAppleCertificateSecret({ relay, teamId, secretStore, commonName, log, }: EnsureAppleCertificateInput): Promise<EnsureAppleCertificateResult>;
+export type SaveAppleProfileInput = {
+    relay: AppleRelayWebSocketClient;
+    teamId: string;
+    profileId: string;
+    secretStore: SigningSecretStore;
+    log?: (message: string, detail?: string) => void;
+};
+/**
+ * Downloads the provisioning profile and stores it as an
+ * appleProvisioningProfile secret named `${teamId}/${uuid}`. The UUID is
+ * unique per profile, so a team can hold many profiles for the same
+ * bundle ID and certificate set; the reference fields (certificate
+ * serials, bundle IDs, device IDs parsed out of the profile) are what
+ * consumers filter on.
+ */
+export declare function saveAppleProfileSecret({ relay, teamId, profileId, secretStore, log, }: SaveAppleProfileInput): Promise<SigningSecret>;
+export type ListTeamProfilesInput = {
+    relay: AppleRelayWebSocketClient;
+    teamId: string;
+};
+/** Lists the team's development provisioning profiles from the portal. */
+export declare function listTeamAppleProfiles({ relay, teamId }: ListTeamProfilesInput): Promise<Record<string, unknown>[]>;
+/** Read a string-ish value from a loosely typed portal record. */
+export declare function stringField(record: Record<string, unknown> | undefined, key: string): string | undefined;

package/dist/apple-credentials/index.js

@@ -0,0 +1,227 @@
+import { listAppleCertificates as h, generateAppleSigningKeyAndCSR as C, createAppleCertificate as D, downloadAppleCertificate as I, exportAppleCertificateP12 as T, downloadAppleProfile as $, listAppleProfiles as B } from "../app-store-relay/index.js";
+import { l as R, f as N } from "../browser-storage-BnO-Ma-e.mjs";
+const A = "appleCertificate", v = "appleProvisioningProfile";
+function P(r) {
+  const e = {};
+  for (const [o, n] of Object.entries(r))
+    n && (e[o] = n);
+  return e;
+}
+async function j(r, e, o) {
+  return r.put(A, e, P(o));
+}
+async function O(r, e, o) {
+  return r.put(v, e, P(o));
+}
+function z(r) {
+  const e = r.fetch ?? fetch.bind(globalThis), o = r.apiUrl.replace(/\/+$/, ""), n = (t, s) => `${o}/v1/organizations/${encodeURIComponent(r.organizationId)}/secrets/${encodeURIComponent(
+    t
+  )}/${encodeURIComponent(s)}`, c = {
+    Authorization: `Bearer ${r.token}`,
+    "Content-Type": "application/json"
+  };
+  async function a(t, s) {
+    let i = `${t.status}`;
+    try {
+      const d = await t.json();
+      d.message && (i = d.message);
+    } catch {
+    }
+    throw new Error(`Failed to ${s} secret: ${i}`);
+  }
+  return {
+    async put(t, s, i) {
+      const d = await e(n(t, s), {
+        method: "PUT",
+        headers: c,
+        body: JSON.stringify({ data: i, replace: !0 })
+      });
+      d.ok || await a(d, "store");
+      const l = await d.json();
+      return { type: l.type, name: l.name, createdAt: l.createdAt, data: l.data };
+    },
+    async get(t, s) {
+      const i = await e(n(t, s), { method: "GET", headers: c });
+      if (i.status === 404) return;
+      i.ok || await a(i, "fetch");
+      const d = await i.json();
+      return { type: d.type, name: d.name, createdAt: d.createdAt, data: d.data };
+    },
+    async list() {
+      const t = await e(
+        `${o}/v1/organizations/${encodeURIComponent(r.organizationId)}/secrets`,
+        { method: "GET", headers: c }
+      );
+      return t.ok || await a(t, "list"), (await t.json()).filter(
+        (i) => i.type === A || i.type === v
+      ).map((i) => ({ type: i.type, name: i.name, createdAt: i.createdAt }));
+    },
+    async delete(t, s) {
+      const i = await e(n(t, s), { method: "DELETE", headers: c });
+      i.status !== 404 && (i.ok || await a(i, "delete"));
+    }
+  };
+}
+const _ = "limrun-signing-secrets", k = 1, p = "secrets";
+function M() {
+  const r = (n, c) => `${n}:${c}`;
+  function e() {
+    return new Promise((n, c) => {
+      const a = indexedDB.open(_, k);
+      a.onupgradeneeded = () => {
+        const t = a.result;
+        t.objectStoreNames.contains(p) || t.createObjectStore(p, { keyPath: "id" });
+      }, a.onsuccess = () => n(a.result), a.onerror = () => c(a.error ?? new Error("Open IndexedDB failed"));
+    });
+  }
+  function o(n) {
+    return new Promise((c, a) => {
+      n.onsuccess = () => c(n.result), n.onerror = () => a(n.error ?? new Error("IndexedDB request failed"));
+    });
+  }
+  return {
+    async put(n, c, a) {
+      const t = await e(), s = await o(
+        t.transaction(p, "readonly").objectStore(p).get(r(n, c))
+      ), i = {
+        id: r(n, c),
+        type: n,
+        name: c,
+        data: a,
+        createdAt: s?.createdAt ?? (/* @__PURE__ */ new Date()).toISOString()
+      };
+      return await o(
+        t.transaction(p, "readwrite").objectStore(p).put(i)
+      ), { type: n, name: c, createdAt: i.createdAt, data: a };
+    },
+    async get(n, c) {
+      const a = await e(), t = await o(
+        a.transaction(p, "readonly").objectStore(p).get(r(n, c))
+      );
+      if (t)
+        return { type: t.type, name: t.name, createdAt: t.createdAt, data: t.data };
+    },
+    async list() {
+      const n = await e();
+      return (await o(
+        n.transaction(p, "readonly").objectStore(p).getAll()
+      )).map((a) => ({ type: a.type, name: a.name, createdAt: a.createdAt }));
+    },
+    async delete(n, c) {
+      const a = await e();
+      await o(
+        a.transaction(p, "readwrite").objectStore(p).delete(r(n, c))
+      );
+    }
+  };
+}
+function x(r, e) {
+  return `${r}/${e}`;
+}
+async function F({
+  relay: r,
+  teamId: e,
+  secretStore: o,
+  commonName: n,
+  log: c = () => {
+  }
+}) {
+  const a = "DEVELOPMENT", t = x(e, a), s = await h({ relay: r, teamId: e, certificateKind: "development" }), i = (f) => f === void 0 ? void 0 : s.find(
+    (m) => u(m, "certificateId") === f || u(m, "certRequestId") === f
+  ), d = await o.get(A, t), l = u(d?.data, "certificateID");
+  if (d && l && d.data.certificateP12Base64) {
+    const f = i(l);
+    if (f) {
+      const m = u(f, "certificateId") ?? l;
+      return c("Reusing stored Apple certificate", m), { secret: d, certificateId: m, created: !1 };
+    }
+    c("Stored certificate is no longer on the team", "Minting a new one.");
+  }
+  const S = await C({ commonName: n ?? `Limrun ${e}` }), y = await D({
+    relay: r,
+    teamId: e,
+    certificateKind: "development",
+    csrPEM: S.csrPEM
+  }), w = u(y, "certificateId") ?? u(y, "certRequestId");
+  if (!w)
+    throw new Error("Apple certificate creation did not return a certificate ID.");
+  const g = await I({
+    relay: r,
+    teamId: e,
+    certificateKind: "development",
+    certificateId: w
+  });
+  if (!g.rawBodyBase64)
+    throw new Error("Apple certificate download returned no bytes.");
+  const b = {
+    certificateP12Base64: T({
+      privateKeyPKCS8Base64: S.privateKeyPKCS8Base64,
+      certificateBase64: g.rawBodyBase64,
+      password: "",
+      friendlyName: `Apple Development ${e}`
+    }),
+    certificateType: a,
+    teamID: e,
+    certificateID: w,
+    // Normalized so it equals the serials profiles reference.
+    serialNumber: R(u(y, "serialNum")),
+    expirationDate: u(y, "expirationDateString")
+  };
+  let E;
+  try {
+    E = await j(o, t, b);
+  } catch (f) {
+    throw new Error(
+      `Certificate ${w} was created on the Apple Developer portal but saving its private key to the secret store failed: ${K(f)}. The key cannot be recovered; revoke certificate ${w} at developer.apple.com before retrying, or the retry will mint another certificate against Apple's limit.`
+    );
+  }
+  return c("Apple certificate stored", w), { secret: E, certificateId: w, created: !0 };
+}
+function K(r) {
+  return r instanceof Error ? r.message : String(r);
+}
+async function G({
+  relay: r,
+  teamId: e,
+  profileId: o,
+  secretStore: n,
+  log: c = () => {
+  }
+}) {
+  const t = (await $({ relay: r, teamId: e, profileId: o })).rawBodyBase64;
+  if (!t)
+    throw new Error("Apple provisioning profile download returned no bytes.");
+  const s = N(t), i = `${e}/${s.uuid ?? o}`, d = await O(n, i, {
+    provisioningProfileBase64: t,
+    certificateSerialNumbers: s.certificateSerialNumbers.join(","),
+    bundleIDs: s.bundleID,
+    deviceIDs: s.provisionedDevices.join(","),
+    teamID: s.teamID ?? e,
+    profileName: s.name,
+    uuid: s.uuid,
+    expirationDate: s.expirationDate
+  });
+  return c("Apple provisioning profile stored", i), d;
+}
+async function V({ relay: r, teamId: e }) {
+  return B({ relay: r, teamId: e, profileKind: "development" });
+}
+function u(r, e) {
+  const o = r?.[e];
+  if (typeof o == "string") return o;
+  if (typeof o == "number" || typeof o == "boolean") return String(o);
+}
+export {
+  A as APPLE_CERTIFICATE_SECRET_TYPE,
+  v as APPLE_PROVISIONING_PROFILE_SECRET_TYPE,
+  x as appleCertificateSecretName,
+  M as createBrowserSecretStore,
+  z as createLimrunSecretStore,
+  F as ensureAppleCertificateSecret,
+  V as listTeamAppleProfiles,
+  R as normalizeCertificateSerial,
+  j as putAppleCertificateSecret,
+  O as putAppleProvisioningProfileSecret,
+  G as saveAppleProfileSecret,
+  u as stringField
+};